CVE-2026-104043: Out-of-bounds Read in Red Hat Red Hat Enterprise Linux 10

This vulnerability in SSSD allows a local attacker with access to the NSS responder UNIX socket to trigger an integer underflow by sending a malformed request with an undersized packet header. The integer underflow leads to an out-of-bounds memory read during packet parsing, which crashes the responder process and causes a denial of service. The vulnerability affects Red Hat Enterprise Linux 10. No known exploits are reported in the wild. The CVSS v3.1 base score is 5.5, reflecting a local attack vector with low complexity and no user interaction required, but only availability impact.

The primary impact is a denial of service caused by the crashing of the NSS responder process. There is no impact on confidentiality or integrity. The attack requires local access with privileges to communicate with the NSS responder UNIX socket.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-104043 for current remediation guidance. Until a patch is applied, limit local access to the NSS responder UNIX socket to trusted users to reduce risk.